PT-2002-2183 · Ibm · Ibm Aix

Published 2002-10-15 · Updated 2016-10-18 · CVE-2002-1201

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 4.3.3 through 5

Description: The issue allows remote attackers to cause a denial of service, resulting in CPU consumption or system crash, by sending a flood of malformed TCP packets without any flags set. This prevents the system from releasing the associated memory buffers.

Recommendations: For IBM AIX versions 4.3.3 through 5, consider implementing network traffic filtering to restrict malformed TCP packets without flags as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2002-1201

Affected Products

Ibm Aix

References · 6

• http://iss.net/security_center/static/10326.php · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?rs=0&q=IY31641&uid=isg1IY31641&loc=en_US&cs=utf-8&cc=us&lang=en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1201 · Security Note
• http://marc.info/?l=bugtraq&m=103418410408599&w=2 · Note
• http://securityfocus.com/bid/5925 · Note
• http://kb.cert.org/vuls/id/102345 · Note